CROWDSTRIKE FALCON® ENDPOINT PROTECTION ENTERPRISE

Unifies the technologies required to successfully stop breaches, including true next-gen antivirus and endpoint detection and response (EDR), managed threat hunting, and threat intelligence automation, delivered via a single lightweight agent.

Watch demo
Falcon Enterprise Unified NGAV, EDR, XDR, managed threat hunting, and integrated threat intelligence
Available with
FALCON ELITE
Available with
FALCON ELITE
optional
Learn more about CrowdStrike Services

Flexible Bundles:

Included Component

Elective Component

REAP THE BENEFITS OF CROWDSTRIKE’S

FALCON ENDPOINT
PROTECTION ENTERPRISE

Sets the new standard with the first cloud-native security platform that delivers the only endpoint breach prevention solution that unifies NGAV, EDR, XDR, managed threat hunting and threat intelligence automation in a single cloud-delivered agent.

crowdstrike incident dashboard with prioritized alerts
STOP BREACHES
Prevents and detects attacks beyond malware →
  • Unparalleled coverage defends against all types of attacks from malware to the most sophisticated and stealthy nation-state attacks
  • Full EDR prevents silent failure by capturing raw events for complete visibility
  • Speed investigations and act fast with intelligent prioritization and powerful Incident Workbench
  • Continuous raw events capture empowers proactive threat hunting
  • Threat intel integration, automated IOA remediation, and powerful real-time response capabilities speed up investigation and remediation and enable deep understanding of the attacks in your environment
  • 24/7 managed threat hunting ensures stealthy attacks don’t go undetected
Learn more about Endpoint Protection Enterprise
Falcon Insight events
THE NEW STANDARD FOR ENDPOINT PROTECTION
Intelligent EDR automatically detects attacks and threat intel integration provides attribution →
  • Falcon Endpoint Protection Enterprise offers a radical new approach to endpoint security by unifying the technology, intelligence and expertise needed to successfully stop breaches, in a single lightweight agent powered by the CrowdStrike Security Cloud.
Learn more about Endpoint Protection Enterprise
Enterprise Dashboard
SIMPLIFY ENDPOINT PROTECTION
Tens of thousands of endpoints
operational in hours →
  • Deploys in minutes and is immediately operational
  • Operates with only a tiny footprint on the endpoint
  • Intelligent EDR and proactive threat hunters automatically detect attacks
  • Integrated threat intelligence accelerates incident remediation
  • Integrated Falcon Fusion orchestrates and automates complex and repetitive tasks - from notifications to response workflows
  • Additional and new capabilities are delivered by the CrowdStrike Falcon® platform without requiring any deployment
  • Automatically kept up-to-date with SaaS delivery
  • Adapts to all needs, growth and security status
  • Simplifies operations with the Falcon agent and console managing both firewall capabilities and USB devices
Learn more about Endpoint Protection Enterprise
example of a crowdscore timeline with a score of 73
See the Big Picture with CrowdScore
  • CrowdScore provides a simple metric to help executives measure and understand the current threat level of the organization, and how it’s changing over time.
  • With CrowdScore, executives can make fast decisions and act to coordinate optimal response.
Learn more about Endpoint Protection Enterprise

BUSINESS VALUE

  • light icon
    Increases security
    efficiency
  • decrease risks icon
    Improves
    productivity
  • healthcare logo
    Decreases risks
    of breach
  • money logo
    Reduces time
    to respond

MODULES INCLUDE

FALCON PREVENT
FALCON PREVENT
Next-gen AV

Protects against both malware and malware-free attacks; third-party tested and certified, allowing organizations to confidently replace their existing legacy AV
FALCON INSIGHT XDR
FALCON INSIGHT XDR
Detection and response for endpoint and beyond

Delivers continuous and comprehensive endpoint visibility across detection, response and forensics, so nothing is missed and potential breaches can be stopped
FALCON INTELLIGENCE
FALCON INTELLIGENCE
Integrated threat intelligence

Integrates threat intelligence into endpoint protection, automating incident investigations and speeding breach response
FALCON DEVICE CONTROL
FALCON DEVICE CONTROL
USB device protection

Enable safe and accountable USB device usage with effortless visibility and precise and granular control of USB device utilization
FALCON OVERWATCH
FALCON OVERWATCH
Threat hunting service

Identifies attacks and stops breaches 24/7 with an elite team of experts who proactively hunt, investigate and advise on threat activity in your environment
grey outline of firewall management icon
Falcon Firewall Management
Host firewall control

Provides simple, centralized firewall management, making it easy to manage and enforce host firewall policies
Falcon OW Detection Highlights
AI POWERED NGAV
← AI powered machine learning and IOAs protect against attacks
  • Protects against known and unknown malware, and malware-free or fileless attacks
  • Combines the best NGAV prevention technologies such as machine learning, AI-powered indicators of attack (IOAs), high-performance memory scanning and more
  • Eliminates ransomware
  • Covers the gaps left by legacy AV
  • Fully protects endpoints online and offline
  • Cleans up known artifacts left behind from blocked malicious activity
example of crowdstrikes incident workbench
EDR
← Intelligent EDR automatically detects attacks and threat intel integration provides attribution
  • Continuous raw event recording provides unparalleled visibility
  • Full endpoint activity details enable proactive and managed threat hunting and forensic investigations
  • Intelligent EDR automatically detects and intelligently prioritizes malicious and attacker activity, reducing alert fatigue by 90% or more
  • Unravels entire attack in the easy-to-use Incident Workbench enriched with context and threat intelligence data
  • Provides powerful response action to contain and investigate compromised systems, including on-the-fly remote access to endpoints to take immediate action
Slider Bottom ep03
MANAGED THREAT HUNTING
← An additional layer of monitoring and analysis to ensure that threats never get missed
Proactively hunts for threats 24/7, eliminating false negatives Uniquely pinpoints the most urgent threats in your environment and resolves false positives Threat hunters partner with your security operations team to provide clarity on an attack and guidance on what to do next.
Falcon Device Control
DEVICE CONTROL
← Detailed visibility on USB devices utilization
Reduces the risks associated with USB devices by providing:
  • Granular policy enforcement to ensure control over USB devices used in the environment
  • Effortless visibility across USB device usage, including what files are being copied to USB storage
  • Insightful dashboards automatically provide detailed information such as class, vendor, product, serial number
Firewall enforce
FIREWALL MANAGEMENT
← Host firewall management made easy
  • Easily create, enforce and maintain firewall rules and policies
  • Simplify operations by using the same lightweight Falcon agent, management console and cloud-native architecture
  • Automatically identify and view specific activities, potential threats and network anomalies
Falcon X Sandbox
INTEGRATED THREAT INTELLIGENCE
← Fully understand the threats in your environment and what to do about them
Malware research and analysis at your fingertips:
  • Eliminate guesswork and uncertainty to respond to threats decisively
  • Automatically determine the scope and impact of threats found in your environment
  • Easily prioritize responses with threat severity assessment
  • Immediately get recovery steps and resolve incidents with in-depth threat analysis
  • Find out if you are targeted, who is targeting you and how to prepare and get ahead
Enterprise Dashboard
THE POWER OF THE CLOUD
← Tens of thousands of endpoints operational in hours
CrowdStrike’s cloud-native platform eliminates complexity and simplifies endpoint security operations to drive down operational cost
Reduced cost and complexity: Operates without the need for constant signature updates, on-premises management infrastructure or complex integrations.
Protection of the crowd: Allows everyone to be protected against a threat encountered in just one environment. Automatically scales to adapt to growth and changing needs.
Restores endpoint performance: Installation and day-to-day operations bear zero impact on endpoints — even when analyzing, searching and investigating.
Works on day one: Deploys and is operational in minutes.

Compare CrowdStrike

See how CrowdStrike’s endpoint security platform stacks up against the competition.

Compare
related resources
See all resources